Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
File: p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft (raw, json)
Hash identifier: b/dtcGSgTgi/Y6Ds1ws3LAsyF2LseJNq/qEtS1Q46Io=
Subject key identifier: B6:BA:23:EF:7E:F9:84:D1:0C:C6:5A:55:C1:C7:23:68:87:68:AE:7A
Authority key identifier: A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
Certificate issuer: /CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Certificate serial: 01A0C40E1E7D1F88277259A58B13A2230C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
Manifest number: 17A7
Signing time: Mon 21 Sep 2026 13:00:54 +0000
Manifest this update: Mon 21 Sep 2026 13:00:54 +0000
Manifest next update: Tue 22 Sep 2026 13:00:54 +0000
Files and hashes: 1: hhOUjf_NNHVROjkzDtvuvC1VPOM.asa (hash: aaNYmLA4SwOuZSM4zGL+Zv09TvO6r7ywXgvya2WrJq4=)
2: p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl (hash: Mnm9ZSOEWwmEwpx/0tpvCKzjUNIlVnreEc/vYd2EUKU=)
3: xiXH-5SM76J3-yxlUQfLvem25-k.roa (hash: BDbe3QCIJuuE+sgkLyO0R164Cf4HsbhT+geqZAmQ7Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:1e:7d:1f:88:27:72:59:a5:8b:13:a2:23:0c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a764a26f76355140aa696e0a4f1f0c312b7277c0
Validity
Not Before: Sep 21 13:00:54 2026 GMT
Not After : Sep 22 13:00:54 2026 GMT
Subject: CN=b6ba23ef7ef984d10cc65a55c1c723688768ae7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:93:9c:59:86:b0:c4:6f:25:46:f2:f2:b5:
ec:9f:6d:37:13:58:2b:97:a2:b4:5b:54:9b:04:fc:
f7:aa:8b:5d:eb:db:8d:81:ab:60:cc:da:eb:c6:2d:
a9:58:46:31:9f:c5:ed:5e:14:e1:1f:b9:c5:42:33:
a7:56:d7:2f:cf:27:4b:84:e4:cf:90:ea:05:a7:79:
7c:2a:2a:e1:25:22:36:96:61:03:a7:c2:cf:ea:f2:
22:51:55:ee:a3:8e:8a:b5:09:2e:d1:b5:17:69:63:
6d:e7:f4:14:36:22:3d:90:8c:0b:5b:81:84:3d:eb:
df:e9:d6:7b:b6:22:98:79:8f:72:7c:e7:8a:6f:24:
76:c2:ec:0d:f4:b4:db:c6:91:5f:4b:b0:cb:f9:4a:
73:e3:b5:6b:d8:c9:65:d7:7e:87:6d:26:31:f7:83:
70:20:65:8e:d9:5e:0c:94:24:a3:34:f3:b9:ff:de:
0d:fb:1e:fd:a3:31:bd:47:3f:be:31:de:62:b8:d2:
f1:52:28:0f:49:d7:6c:a9:91:44:af:c5:b1:4a:7e:
16:99:c8:35:cf:63:ac:4e:3b:5e:14:73:52:ff:a9:
64:d4:69:90:a1:20:32:bc:13:84:04:55:25:18:dc:
18:03:63:97:35:85:ee:51:04:4a:bc:e2:21:53:cb:
e9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:23:EF:7E:F9:84:D1:0C:C6:5A:55:C1:C7:23:68:87:68:AE:7A
X509v3 Authority Key Identifier:
keyid:A7:64:A2:6F:76:35:51:40:AA:69:6E:0A:4F:1F:0C:31:2B:72:77:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2Sib3Y1UUCqaW4KTx8MMStyd8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1e8183-aad1-4fd7-b10f-ffa4950a1ccb/1/p2Sib3Y1UUCqaW4KTx8MMStyd8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:ea:a0:99:b8:a3:5a:ab:ce:dd:41:71:e6:6a:53:7d:19:1d:
ab:b1:6f:f9:ed:04:dc:fe:55:93:b1:00:6c:b7:14:83:8e:4b:
e9:1f:03:b5:a2:c8:59:05:75:6e:1e:e6:9a:fb:59:2a:dd:39:
c6:33:45:e1:58:ce:69:8f:27:01:4b:4c:17:ed:15:c0:86:19:
28:99:72:73:8b:29:21:a8:59:eb:93:9f:bc:b1:91:9d:ce:ab:
ee:02:5f:49:5b:5e:0b:76:8f:da:1b:18:f3:f6:8e:c8:c5:3e:
e8:01:37:1a:5d:15:e8:7e:fe:5b:d7:b0:73:af:59:5b:19:1d:
8e:60:42:d4:6b:3e:c3:66:87:9c:c3:c5:d1:7d:70:1e:ff:73:
9e:ce:59:41:b1:19:1f:61:23:63:fd:fd:4e:ff:3a:60:5b:e6:
4f:72:95:58:15:d2:88:9f:10:d9:b5:13:a1:82:be:e9:34:08:
cd:bc:ef:e8:38:52:f3:76:57:d2:96:e2:6a:85:39:5f:dd:1a:
3f:63:ef:b8:36:6f:91:fc:1d:17:ec:02:5a:95:a4:da:20:db:
65:fd:52:06:9b:56:43:d8:a4:01:10:a2:38:d4:59:6b:10:f2:
37:d6:48:7a:da:a7:15:ca:61:b9:70:f8:cc:e6:7a:65:62:cb:
f5:7a:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:00:22 2026 by rpki-client